04-27-2011 06:06 PM - edited 03-11-2019 01:26 PM
Can anyone tell me if it is possible to block a website or ip address from an ASA 5505? if it is possible, can you give me an example of the commands to get it done?
thanks
--jon
04-27-2011 06:12 PM
Assuming that your traffic is from the ASA inside interface towards the outside interface, and assuming that you have no access-list applied to the inside interface at the moment:
To block to a specific website:
access-list inside-acl deny tcp any host
access-list inside-acl permit ip any any
access-group inside-acl in interface inside
If you however already have an access-list applied to your inside interface, just add the deny statement above all the permit statement to block the access.
Hope that helps.
04-27-2011 09:14 PM
Adding to Jennifer's reply if your intent is also to block certain websites being accessed from the local LAN please check the below link,
https://supportforums.cisco.com/docs/DOC-1268
Regards,
Usaid.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide